Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
File:                     FMxtyeCRBW52oT-Pinw1duzx27E.mft (raw, json)
Hash identifier:          cjEnE+pJ6EqBMxxDtsv8qFQYqUBMQ19hxjUaIMgb4xw=
Subject key identifier:   73:15:D3:CA:6C:11:43:5B:9E:23:9C:C9:FD:7C:2E:B4:D6:36:F4:08
Authority key identifier: 14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1
Certificate issuer:       /CN=A91C9D04/serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1
Certificate serial:       15DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
Manifest number:          1EF2
Signing time:             Sat 14 Jun 2025 16:43:19 +0000
Manifest this update:     Sat 14 Jun 2025 16:43:19 +0000
Manifest next update:     Sat 21 Jun 2025 16:43:19 +0000
Files and hashes:         1: FMxtyeCRBW52oT-Pinw1duzx27E.crl (hash: 7V+rshs2HiW8ds7LNQSYzgNc2YBzvFhMP9i5YY2xQy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5599 (0x15df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D04, serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1
        Validity
            Not Before: Jun 14 16:43:19 2025 GMT
            Not After : Jun 21 16:43:19 2025 GMT
        Subject: CN=684da6a7-08f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:8d:bb:68:29:20:5e:cd:db:ad:ca:f4:f3:
                    fa:1b:75:5e:08:ec:8a:2e:17:f2:dd:a9:b7:f2:36:
                    52:f8:5c:69:f6:a4:14:5d:5f:18:17:17:96:f0:2b:
                    e8:6e:86:bd:88:af:f4:65:67:0d:7a:3d:7e:80:5d:
                    ed:ee:ba:49:ec:fa:67:e6:a1:96:3d:9c:35:2d:cf:
                    42:7a:9c:77:6a:9b:8f:82:d9:5c:75:8e:a1:14:9b:
                    f4:6d:01:22:39:55:5a:81:97:98:47:5d:aa:97:7b:
                    25:9a:53:f2:59:76:68:2a:6c:24:9d:61:93:02:5c:
                    0a:51:73:ca:9a:29:be:a0:22:a2:ea:61:b2:6a:24:
                    ef:1b:c6:aa:6e:16:eb:99:c5:4e:29:36:93:05:c8:
                    ab:fa:61:9f:38:ef:d1:0c:5a:cb:76:7d:fe:82:24:
                    16:c2:6e:09:38:ab:0e:a3:71:68:f2:22:b2:26:38:
                    eb:97:70:67:de:7e:c1:75:ae:5a:33:99:21:b2:5f:
                    a4:97:86:3e:f9:39:6d:93:31:76:bd:ba:de:80:29:
                    0b:ad:eb:8e:ff:5e:5c:ec:58:52:31:19:3c:c0:6a:
                    c8:e3:5d:58:d1:26:7c:f8:6a:07:d0:2d:10:59:b1:
                    2e:ad:6c:2f:3a:c9:17:55:8c:14:c3:e0:f2:c8:a3:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:D3:CA:6C:11:43:5B:9E:23:9C:C9:FD:7C:2E:B4:D6:36:F4:08
            X509v3 Authority Key Identifier:
                keyid:14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f3:20:16:34:e2:52:79:be:b4:e7:96:fc:9b:09:48:88:7e:37:
         58:e8:f8:58:28:b4:8f:f6:0d:89:a9:b7:a6:dc:fc:79:5f:c0:
         d1:52:a8:60:c4:7b:d1:66:d4:d4:89:e0:db:cb:5a:bb:19:e9:
         94:9e:e2:7c:b5:c9:ba:02:ed:25:1a:66:e4:d1:61:79:13:b0:
         82:3a:83:37:a6:3d:a4:18:a1:27:5a:81:4d:18:17:e0:28:21:
         f1:40:13:eb:71:2a:9f:2e:67:74:f2:01:55:f4:b2:3d:f5:8b:
         16:4b:0a:75:39:b6:92:12:d3:86:13:c9:76:7c:79:1b:2f:1d:
         43:a4:a3:e8:e8:0d:a6:af:6d:d4:a8:61:67:a3:88:11:fd:eb:
         3e:58:c3:4c:86:96:9e:26:6c:a2:60:1a:94:81:9c:e2:d6:93:
         28:c2:71:ce:56:07:15:15:df:21:48:c9:a3:38:47:64:c9:4b:
         47:1b:e8:fb:52:9e:a5:ab:c3:3b:ab:a7:fe:29:89:d4:00:d6:
         c5:0b:11:83:f2:bc:38:61:88:08:72:44:37:eb:c3:eb:b9:fe:
         99:8c:4e:27:65:7f:72:79:64:c6:23:68:da:25:b6:94:dd:4b:
         c5:e6:50:7e:10:cc:15:35:2f:51:56:8c:f8:d7:ba:26:44:9d:
         e6:6e:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:32:49 2025 by rpki-client